Securing servlet

[Shaheena_Sheikh]

I have a servlet that provides page content in needed JSON format. This JSON will be used by a third party and I need to provide a security level check to this. How can I provide a token authentication in servlet or in ant service/wrapper before servlet to provide a layer of security. 

This cannot be done by AEM ACL because the requirement is to do it via code using token authentication.

How can this be achieved?

[arunpatidar]

The alternative could be the basic auth, which can be setup easily at apache level. If that suits your requirement?

For token I am no sure if you can validate the token from AEM and consumer from the identity provider.

[Shaheena_Sheikh]

so for basic auth, do i need to create userID and password in aem useradmin?

[arunpatidar · Accepted solution]

Hi,
Yes you need it but not in AEM. you can set it up at apache

https://www.cloudsavvyit.com/1361/how-to-setup-basic-http-authentication-on-apache/